thanks form works, but now need to make cookieauth optional again